CVE-2015-10029mediumCWE-611

CVE-2015-10029: fallo de gravedad media en kelvinmo simplexrd

kelvinmo simplexrd simplexrd.class.php xml external entity reference

Publicada el 07 ene 2023 · Actualizada el 09 abr 2025

Seguir esta CVE + Monitorear simplexrd + Monitorear kelvinmo/simplexrd

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

13Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 5.5epss 0.9%

A vulnerability classified as problematic was found in kelvinmo simplexrd up to 3.1.0. This vulnerability affects unknown code of the file simplexrd/simplexrd.class.php. The manipulation leads to xml external entity reference. Upgrading to version 3.1.1 is able to address this issue. The patch is identified as 4c9f2e028523ed705b555eca2c18c64e71f1a35d. It is recommended to upgrade the affected component. VDB-217630 is the identifier assigned to this vulnerability.

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Productos afectados

kelvinmo · simplexrd

Referencias

https://github.com/kelvinmo/simplexrd/commit/4c9f2e028523ed705b555eca2c18c64e71f1a35d https://github.com/kelvinmo/simplexrd/releases/tag/v3.1.1 https://vuldb.com/?ctiid.217630 https://vuldb.com/?id.217630